Privacy Policy

Dr Riyaz Kaba is committed to protecting your privacy.  We understand the importance of ensuring that the personal information entrusted to us is protected and respected and we therefore treat personal data in accordance with our obligations under the General Data Protection Regulation, in addition to our clinical confidential requirements.

All Chambers Limited is registered in England with company number 07063903.  Our registered office is 17 Kempshott Road, London SW16 5LG.

This privacy policy sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed by us.  Please read the following carefully to understand our views and practices regarding your personal information and how we treat it.


Information we collect from you

We may collect and process the following personal information about you:

Information you give to us:

Medical Records – Information must be collected as part of your registration with the Practice.  This includes information such as your name, address, date of birth, email address, telephone number, next of kin and medical history.

Failing to provide us with this information will result in us being unable to provide treatment.

Enquiries – We may record your details in order to track and follow up on enquiries, in addition to scheduling appointments.  This includes information such as your name, email address or telephone number.

Uses made of the information we collect from you

When you provide personal information to us, the purpose for which you are providing the personal information will always be made clear.

Information you give to us:

We may use this information for some or all of the following reasons:

  • To provide you with the information, treatments, products and services that you request from us
  • To notify you about changes to our service
  • To contact you for post-treatment follow-up and care


Who we share your personal data with

We take our obligations under the General Data Protection Regulation and our clinical confidentiality requirements very seriously.

Sensitive information relating to your medical history will be kept confidential and will only be disclosed to the individuals involved with delivering your treatment

We may share your personal information with:

  • Permanent or temporary members of Dr Riyaz Kaba’s medical and administrative team as part of your ongoing care provision, or for the purpose of analysing the business.
  • Selected third parties including your GP, Healthcare insurers, other Consultants, Doctors, Hospitals and Clinics.

There may also be circumstances where we are under a duty to disclose your personal information or share your personal information in order to comply with any legal or regulatory requirement, obligation or request.  This includes the Police for the prevention or investigation of a crime, or our Insurers or legal advisors or other third parties who need access to it in the context of managing, investigating or defending claims or complaints.


Your information

We cannot guarantee that the information you send us over the internet is secure but once we received it we will take all reasonable steps to protect the information you supply to us.  Dr Riyaz Kaba will not transfer your data outside of the European Economic Area.  Information will be stored electronically using practice manager software that will be backed up regularly on local and cloud based servers.

Under the General Data Protection Regulation, we will only hold personal identifiable data for the maximum retention periods:

  • Medical Records – Seven years following last appointment
  • Financial Records – Seven years


Your rights

You have the right to ask us not to process your personal information but where consent is withdrawn for the processing of personal data from your medical records, our ability to continue your treatment will be impaired.

In some circumstances you have the right to be forgotten and we will erase all data held about you.  Medical records are exempt from erasure before our maximum retention periods.  Requests for erasure should be made in writing to Personal Assistant to Dr Riyaz Kaba, Nuffield Health Woking Hospital, Shores Road, Woking, GU21 4BY and will be assessed on a case by case basis.



Access to information

The General Data Protection Regulation gives you the right to access information held about you.  Any requests should be made in writing to the Personal Assistant to Dr Riyaz Kaba, Nuffield Health Woking Hospital, Shores Road, Woking, GU21 4BY.

All records will be supplied within one month of receipt of the Subject Access Request.

All requests will be subject to the appropriate identification checks.  Whilst there is no charge for the first copy of your record, we reserve the right to charge a small administrative fee for all subsequent copies of the same record.



Contact and Complaints

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to the Personal Assistant to Dr Riyaz Kaba Nuffield Health Woking Hospital, Shores Road, Woking, GU21 4BY